Title: TokenLink SSO Login for Zendesk Author: Jerry Benton Published: نوفمبر 2, 2025 Last modified: جوان 6, 2026 --- Search plugins ![](https://ps.w.org/tokenlink-sso-login-for-zendesk/assets/banner-772x250.png?rev =3388486) ![](https://ps.w.org/tokenlink-sso-login-for-zendesk/assets/icon-256x256.png?rev =3388486) # TokenLink SSO Login for Zendesk By [Jerry Benton](https://profiles.wordpress.org/mailborder/) [Download](https://downloads.wordpress.org/plugin/tokenlink-sso-login-for-zendesk.1.0.10.zip) * [Details](https://arq.wordpress.org/plugins/tokenlink-sso-login-for-zendesk/#description) * [Reviews](https://arq.wordpress.org/plugins/tokenlink-sso-login-for-zendesk/#reviews) * [Installation](https://arq.wordpress.org/plugins/tokenlink-sso-login-for-zendesk/#installation) * [Development](https://arq.wordpress.org/plugins/tokenlink-sso-login-for-zendesk/#developers) [Support](https://wordpress.org/support/plugin/tokenlink-sso-login-for-zendesk/) ## Description TokenLink SSO Login for Zendesk allows WordPress site administrators to provide seamless, secure single sign-on (SSO) access to Zendesk using JWT (JSON Web Tokens) authentication. This plugin uses the official Firebase PHP-JWT library (BSD 3-Clause licensed, included and updated for WordPress compliance). Setup takes less than five minutes using standard WordPress shortcodes — no third- party dependencies, no tracking, no bloat. Written by Jerry Benton, the creator of Mailborder and MailScanner v5. ### License This plugin is licensed under the GPLv3 or later. It includes the Firebase PHP- JWT library, which is licensed under the BSD 3-Clause license. ## Screenshots [⌊TokenLink SSO Login for Zendesk settings page under Settings → TokenLink Zendesk SSO.⌉⌊TokenLink SSO Login for Zendesk settings page under Settings → TokenLink Zendesk SSO.⌉[ TokenLink SSO Login for Zendesk settings page under **Settings TokenLink Zendesk SSO**. [⌊zendesk.com JSON Web Token configuration.⌉⌊zendesk.com JSON Web Token configuration .⌉[ zendesk.com JSON Web Token configuration. [⌊Example shortcode page configuration.⌉⌊Example shortcode page configuration.⌉[ Example shortcode page configuration. ## Installation There are three ways to install this plugin: #### From the WordPress Plugin Directory (Preferred) 1. In your WordPress admin dashboard, go to **Plugins Add New**. 2. Search for **TokenLink SSO Login for Zendesk**. 3. Click **Install Now**, then **Activate**. #### Upload via ZIP File 1. Download the plugin ZIP file from [mailborder.com](https://www.mailborder.com/zendesk-sso-plugin) or from WordPress.org. 2. In your WordPress admin dashboard, go to **Plugins Add New** and click **Upload Plugin** at the top. 3. Select the ZIP file and click **Install Now**. 4. When installation completes, click **Activate Plugin**. #### Manual Installation (FTP or File Manager) 1. Download the plugin ZIP file and extract it on your computer. 2. Upload the extracted folder to `/wp-content/plugins/` using FTP or your hosting file manager. 3. Activate it through the **Plugins** menu in WordPress. #### Configuration 1. Navigate to **Settings TokenLink Zendesk SSO**. 2. Enter your **Zendesk Subdomain** and **Shared Secret**. 3. Set a **Login Redirect Page** if you use a custom login URL. 4. Create a blank WordPress page and insert this shortcode: ** [tokenlink_zendesk_login]** 5. (Optional) Create a menu item that links to that page. (e.g. a Support link) 6. Use that page’s URL as your **Remote Login URL** in the zendesk.com SSO settings. The plugin will automatically handle authentication to Zendesk and redirect users to Zendesk via secure JWT SSO. ## FAQ ### Is this plugin free? Yes. 100% free. As in free beer. No pro version. No nagware. ### Is this plugin lightweight? Yes. It loads ~40kb of code when it runs. ### Does this plugin require any other plugin? No. This is a standalone plugin and does not depend on any other plugin. ### Does it work with modern Zendesk accounts? Yes. It implements the standard JWT-based SSO endpoint (`/access/jwt`). ### Is Composer required? No. The JWT library is bundled directly in the plugin for convenience and meets WordPress PHPCS standards. ### Does this plugin store any user data? No. It simply authenticates the current logged-in WordPress user and securely passes their name and email to Zendesk for SSO. No personal data is logged or retained by the plugin. ### Can I customize the login redirect page? Yes. You can set a custom login page under **Settings Zendesk SSO Login Redirect Page**. If left blank, it defaults to the standard WordPress login screen. ### Does this plugin support multisite installations? Yes. It can be network-activated or activated on individual subsites. Each site can have its own Zendesk configuration. ### Can this be used with caching or security plugins? Yes. It’s compatible with common caching and security plugins. If your caching plugin caches logged-in pages, exclude the page containing `[tokenlink_zendesk_login]` to ensure proper redirects. ### Will it conflict with existing SSO or login plugins? No, it runs independently. It only triggers when the `[tokenlink_zendesk_login]` shortcode is executed, so it won’t interfere with other authentication systems. ### Does this plugin work with Cloudflare or reverse proxies? Yes. As long as HTTPS and PHP sessions function normally, JWT SSO works over any proxy or CDN. ### I’m getting a 502 or redirect loop. What should I check? Verify your Zendesk subdomain and shared secret are correct, and that your Zendesk SSO settings point to your WordPress page URL containing `[tokenlink_zendesk_login]`. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “TokenLink SSO Login for Zendesk” is open source software. The following people have contributed to this plugin. Contributors * [ Jerry Benton ](https://profiles.wordpress.org/mailborder/) [Translate “TokenLink SSO Login for Zendesk” into your language.](https://translate.wordpress.org/projects/wp-plugins/tokenlink-sso-login-for-zendesk) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/tokenlink-sso-login-for-zendesk/), check out the [SVN repository](https://plugins.svn.wordpress.org/tokenlink-sso-login-for-zendesk/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/tokenlink-sso-login-for-zendesk/) by [RSS](https://plugins.trac.wordpress.org/log/tokenlink-sso-login-for-zendesk/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.10 – 2026-05-28 * Verified compatible with WordPress 7.0 (released 2026-05-20). No DataViews or classic meta box dependencies. * Added modern plugin header fields: Requires at least, Requires PHP, Tested up to, Text Domain. * Moved SSO redirect from the shortcode callback to the `template_redirect` action( priority 1) so headers are always available; runs ahead of most caching plugins. * Added gates so preview, customizer, REST, AJAX, cron, XML-RPC and WP-CLI requests are not redirected. * Honour `post_password_required()` so password-protected pages keep their gate. * New `tokenlink_zendesk_sso_page_match` filter so page builders (Elementor, Bricks, etc.) can flag SSO pages whose shortcode lives outside post_content. * Loop guard: if the configured login redirect resolves back to the SSO page itself, fall back to the default WP login URL. * External login redirect URLs (off-site IdPs) are now actually followed instead of silently falling back to wp-login.php. * Security: JWT now includes `exp` (now+120s) and `nbf` (now-60s, 60s skew tolerance) claims; URL-safe `jti`; 128-bit entropy. * Security: subdomain strictly validated at both save time and use time (lowercase alphanumeric + hyphens, RFC-style DNS label), rejecting pasted URLs or malicious strings. * Security: redirects now send `nocache_headers()` and HTTP 303 so intermediate caches cannot cross-serve a JWT to another user. * Security: Shared Secret field changed to password input with autocomplete disabled. * Hardened login-redirect option sanitizer: requires empty, “/”-rooted path, or full http(s):// URL; rejects protocol-relative and other schemes. * Shared secret sanitizer relaxed to trim-only so legitimate Zendesk-generated secrets are not mutated. * `display_name` is HTML-decoded and tag-stripped before going into the JWT; `user_email` is lowercased to avoid duplicate Zendesk users. * Localized previously hardcoded English strings in the settings UI. * Guarded `get_plugin_data()` call with explicit `wp-admin/includes/plugin.php` include. * New activation notice points administrators at the settings page on first activation. #### 1.0.9 – 2026-01-26 * Added tabbed settings interface with General and About tabs. * Added About page with plugin information, features, and support links. #### 1.0.8 – 2025-12-03 * Code compliance review for WordPress 6.9. * Updated documentation. #### 1.0.7 – 2025-11-02 * Code compliance review for WordPress PHPCS standards. * Added Settings link to plugin action links. * Improved plugin description. #### 1.0.6 – 2025-10-19 * Initial public release. * Modernized JWT implementation (Firebase PHP-JWT). * Added WordPress settings screen. * Added `[tokenlink_zendesk_login]` shortcode. ## Meta * Version **1.0.10** * Last updated **4 months ago** * Active installations **Fewer than 10** * WordPress version ** 5.5 or higher ** * Tested up to **7.0.6** * PHP version ** 7.4 or higher ** * Language * [English (US)](https://wordpress.org/plugins/tokenlink-sso-login-for-zendesk/) * Tags * [jwt](https://arq.wordpress.org/plugins/tags/jwt/)[login](https://arq.wordpress.org/plugins/tags/login/) [Single Sign-on](https://arq.wordpress.org/plugins/tags/single-sign-on/)[sso](https://arq.wordpress.org/plugins/tags/sso/) [zendesk](https://arq.wordpress.org/plugins/tags/zendesk/) * [Advanced View](https://arq.wordpress.org/plugins/tokenlink-sso-login-for-zendesk/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/tokenlink-sso-login-for-zendesk/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/tokenlink-sso-login-for-zendesk/reviews/) ## Contributors * [ Jerry Benton ](https://profiles.wordpress.org/mailborder/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/tokenlink-sso-login-for-zendesk/) ## Donate Would you like to support the advancement of this plugin? [ Donate to this plugin ](https://donate.stripe.com/14AdRa6XJ1Xn8yT8KObfO00)